Laserfiche WebLink
Security Policies and Procedures <br />C. Export controls <br />Information may not be exported across country boundaries without prior written <br />approval of the Company's ISO. <br />XVIII. Malware and Antivirus <br />A. Definitions <br />Anti-Malware: malicious software that may reside on a computer, steal information or <br />cause destruction. This can include a virus, trojan horse, keylogger, hijacker or dialer. <br />Sandbox: A highly controlled area where programs and software can be tested before <br />being allowed access to the rest of the system. <br />B. Operating system anti-malware requirements <br />Macintosh, Linux and iPhones: <br />Virtru has determined that software for anti-malware scanning on Macintosh, Linux <br />and iPhones is not necessary due to the low probability of encountering malware, the <br />demand on computer processing power, and loss of productivity by the user. This <br />policy will be reviewed annually or as needed to determine if this is still valid. <br />PC Operating Systems: <br />Data entering Virtru's Window -based systems must be subject to an up-to-date <br />anti-malware scanning tool that is scheduled to run at regular intervals. In addition, all <br />emails, attachments, disks, backup media, USB memory devices and other data carrying <br />tools must be scanned before they are downloaded or allowed access to the system. All <br />incoming data must be sandboxed by the anti-malware program before it is allowed <br />access to the system. The anti-malware pattern files must be regularly updated. <br />Android and Windows Phone Operating Systems: <br />All such devices must have anti-malware tools in place prior to being connected to <br />Virtru's networks. These systems must be subject to an up-to-date anti-malware <br />scanning tool that is scheduled to run at regular intervals. In addition, all emails, <br />attachments, and SD cards must be scanned before they are downloaded or allowed <br />access to the system. <br />C. Affiliates <br />Virtru and all of its affiliates, contractors, consultants, vendors, representatives or <br />other service providers must make certain that adequate controls are in place to <br />guarantee that data coming from their systems and networks is free from malware. <br />Rev.2015.8.6 <br />36 <br />